Re: DNS server

2003-03-14 Thread martin f krafft
also sprach Eduard Ballester <[EMAIL PROTECTED]> [2003.03.14.1717 +0100]: > BIND 9.2.x of course, ugh. > * DNS Security > DNSSEC (signed zones) > TSIG (signed DNS requests) TSIG: there may well be patches to djbdns. However, for internal clients, IPsec is really the way to go. > On

Re: DNS server

2003-03-14 Thread martin f krafft
also sprach martin f krafft <[EMAIL PROTECTED]> [2003.03.14.1805 +0100]: > > o support for DNSSec > > i am sure there are patches out there. wait, djbdns doesn't need DNSSEC at all. it doesn't suffer from AXFR/IXFR problems like BIND. seriously, djbdns is nice. you should try it. -- Please

Re: DNS server

2003-03-14 Thread martin f krafft
also sprach Markus Welsch <[EMAIL PROTECTED]> [2003.03.14.1502 +0100]: > o ACL-System based on IP-address > (like having netblocks to do querying everything and all >others could just query domains that they are allowed to; >same goes for update)

Re: DNS server

2003-03-14 Thread martin f krafft
also sprach Eduard Ballester <[EMAIL PROTECTED]> [2003.03.14.1717 +0100]: > BIND 9.2.x of course, ugh. > * DNS Security > DNSSEC (signed zones) > TSIG (signed DNS requests) TSIG: there may well be patches to djbdns. However, for internal clients, IPsec is really the way to go. > On

Re: DNS server

2003-03-14 Thread martin f krafft
also sprach martin f krafft <[EMAIL PROTECTED]> [2003.03.14.1805 +0100]: > > o support for DNSSec > > i am sure there are patches out there. wait, djbdns doesn't need DNSSEC at all. it doesn't suffer from AXFR/IXFR problems like BIND. seriously, djbdns is nice. you should try it. -- Please

Re: DNS server

2003-03-14 Thread Eduard Ballester
So it should provide the base features of BIND ... but I'd rather like to step away from it for security reasons. Another option should be the posibiltiy to chroot it (like the default chroot of other daemons like postfix, etc). BIND 9.2.x of course, http://www.isc.org/products/BIND/bind9.ht

Re: DNS server

2003-03-14 Thread martin f krafft
also sprach Markus Welsch <[EMAIL PROTECTED]> [2003.03.14.1502 +0100]: > o ACL-System based on IP-address > (like having netblocks to do querying everything and all >others could just query domains that they are allowed to; >same goes for update)

Re: DNS server

2003-03-14 Thread Eduard Ballester
So it should provide the base features of BIND ... but I'd rather like to step away from it for security reasons. Another option should be the posibiltiy to chroot it (like the default chroot of other daemons like postfix, etc). BIND 9.2.x of course, http://www.isc.org/products/BIND/bind9.ht

Re: dns server

2000-05-10 Thread Torsten Krueger
Hi Chad, On Tue, 9 May 2000, t s a d i wrote: > i once set up a web/mail virtual hosting box for a friend who owns a small > ISP ... i put webmin 0.71 (i think, that was back feb 1999) in there and its > still perfectly healthy as of now (she never upgraded or applied patches to > it) > ..

Re: dns server

2000-05-09 Thread t s a d i
> webmin? Let's hope there'll be others out there who are aware of any > possible risks with using webmin and would fill us in. > hello :-) i once set up a web/mail virtual hosting box for a friend who owns a small ISP ... i put webmin 0.71 (i think, that was back feb 1999) in there and

RE: dns server

2000-05-09 Thread Michael Abrahamsson
Sent: May 9 2000 20:40 To: debian-isp@lists.debian.org Subject: Re: dns server Could something like Webmin ( http://www.webmin.com/ ) do the trick? // Kim Lundgren On Tue, May 09, 2000 at 12:02:27PM -0600, John Gonzalez/netMDC admin wrote: > There might be web interfaces for RaQ products that a

Re: dns server

2000-05-09 Thread John Gonzalez/netMDC admin
I have no experience with wemin either :) On Tue, 9 May 2000, Kim Lundgren wrote: >Could something like Webmin ( http://www.webmin.com/ ) do the trick? > >// Kim Lundgren ___ _ __ _ __ /___ ___ /__ John Gonzalez/Net.Tech __ __ \ __

Re: dns server

2000-05-09 Thread Kim Lundgren
Could something like Webmin ( http://www.webmin.com/ ) do the trick? // Kim Lundgren On Tue, May 09, 2000 at 12:02:27PM -0600, John Gonzalez/netMDC admin wrote: > There might be web interfaces for RaQ products that allow you to do this, > and it might be possible to port them to x86 linux? > > I

Re: dns server

2000-05-09 Thread John Gonzalez/netMDC admin
There might be web interfaces for RaQ products that allow you to do this, and it might be possible to port them to x86 linux? I have never used a raq, nor am i familiar with wether their software is even open source. On Tue, 9 May 2000, mediagenic services wrote: >Hi, > >i am searching for a dns

Re: dns server

2000-05-09 Thread Erik Peter P. Abella
Hello Achim, Coming from an NT background myself, when I started working with Linux, I too initially missed alot of NT's graphical tools but all that has changed since I've started using WebMin. It's a total adminitrative tool and goes beyond configuring DNS - it'll do all network services/daemon